[kwlug-disc] Blocking SIP registrations

[Paul Nijjar]

So Herman (who is currently off kwlug-disc but might rejoin) is
wondering how to keep people from hammering his Asterisk server with
attempted SIP registrations. He tried fail2ban but found it was not
working for him. He asked me about a product called SecAst
(http://www.generationd.com/?target=secast) but being an Asterisk
newbie I had never heard of it. 

Questions for Asterisk people: 

0. How do you secure your server against attempts to brute force SIP
connections?

1. Have you heard of this product? Do you have opinions?

2. Are there other tools Herman should try? Ways to tune fail2ban so
that it works?

- Paul


-- 
http://pnijjar.freeshell.org